Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: aNlhQHOGjEVUHXML2HEv2V80O3PxhU6272CaKdKA3K0=
Subject key identifier: E0:F3:19:93:B2:1E:FE:EF:91:AE:44:EF:35:CE:29:AB:C3:13:76:9C
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0199FCC644DB1429657B213A95CCBA56502F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0914
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: 2tVvT-OzgGdNXgQsNlAxpRssgyE.roa (hash: EhNAeP4JfxTsW+0bH7nE7m5v2RlCWybXdkQhCZXgLiY=)
2: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
3: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
4: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: 5XXKaDxt9LeITs//KGOiO+5frxS41PoNYr+FgMN5b0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:44:db:14:29:65:7b:21:3a:95:cc:ba:56:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=e0f31993b21efeef91ae44ef35ce29abc313769c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:13:ca:ca:ed:44:1f:80:fe:41:ee:9b:9f:
a6:a3:38:21:4a:e6:5b:d8:bf:c5:b4:2c:12:6b:d9:
25:37:e3:71:1f:33:30:08:26:f5:ee:2f:be:cd:20:
15:ca:2f:0a:ba:82:d7:50:94:96:1c:48:dd:8c:8a:
a8:a1:ef:56:e0:5d:ff:93:94:29:3c:db:69:c4:8e:
62:c4:cb:d9:34:86:d0:10:92:fb:9d:8d:7e:e7:73:
f2:12:51:6b:f8:68:18:55:09:e3:f5:33:35:b1:85:
d9:73:13:09:f4:9a:63:9c:63:81:36:8d:10:f4:b0:
2e:37:60:8d:55:e1:84:07:4a:b3:4f:91:66:15:37:
19:bb:35:b2:33:48:d2:6c:d6:c4:49:33:52:ea:f6:
09:d5:6f:08:b8:12:04:0d:8a:0f:51:34:c7:e8:37:
7d:40:fe:83:0b:09:56:fe:6e:31:17:9b:bc:31:5e:
8a:e9:ea:03:b0:dc:39:9e:4c:c2:a6:f8:e4:9a:e8:
e0:fb:3a:24:88:17:2a:ad:fa:d2:d7:ba:60:60:16:
36:a6:69:4c:47:9b:2b:c8:84:0b:65:1a:30:f3:0d:
cc:22:d5:91:c3:2b:40:b9:d3:e7:47:4a:86:9e:c9:
0c:01:9f:c7:0f:61:90:4e:1e:28:a0:8d:d8:08:25:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:19:93:B2:1E:FE:EF:91:AE:44:EF:35:CE:29:AB:C3:13:76:9C
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:5b:a8:16:34:15:07:cb:81:b8:9c:97:ad:d7:05:74:13:
fd:78:dd:b5:ab:29:11:b5:e1:01:1e:be:56:a8:c6:57:76:08:
7e:8b:0f:dc:81:72:14:a0:73:66:8e:54:cd:35:2d:f4:44:32:
3b:6e:bb:2a:8f:b5:09:06:2e:04:a1:89:82:88:d0:99:04:c8:
79:fe:ad:8b:d9:a8:42:cb:94:ff:d1:0d:fc:cf:2c:24:58:95:
a8:77:d2:ac:c8:b3:51:f0:b7:c3:69:23:1f:41:7d:5a:3d:04:
c6:bc:06:59:96:09:11:6d:b6:49:7d:92:7f:c9:f1:02:bd:d0:
6f:4d:a4:76:84:62:7d:86:cb:66:16:90:0b:f4:78:77:75:ef:
92:ce:65:b4:71:36:7a:3e:3d:63:0f:da:87:26:47:77:bf:0f:
ba:61:1a:ed:cd:74:9f:3c:84:34:75:b5:e8:6b:03:b0:f7:84:
c0:a5:98:08:dd:0b:40:ac:b6:cd:21:36:54:5c:8c:71:aa:31:
ef:ea:c7:b5:ce:ba:78:ce:82:f8:50:82:8b:93:1e:ff:76:cb:
d3:a4:5e:a5:bc:49:4f:ac:da:59:34:4d:48:84:c6:13:0f:b4:
3a:ab:b9:7b:8a:6f:86:b0:50:bb:6a:82:0d:9f:ea:f1:21:4c:
5e:41:8b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xkTbFClleyE6lcy6VlAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy
MTY1ZWIwHhcNMjUxMDE5MTQwMTE2WhcNMjUxMDIwMTQwMTE2WjAzMTEwLwYDVQQD
EyhlMGYzMTk5M2IyMWVmZWVmOTFhZTQ0ZWYzNWNlMjlhYmMzMTM3NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YETysrtRB+A/kHum5+mozghSuZb
2L/FtCwSa9klN+NxHzMwCCb17i++zSAVyi8KuoLXUJSWHEjdjIqooe9W4F3/k5Qp
PNtpxI5ixMvZNIbQEJL7nY1+53PyElFr+GgYVQnj9TM1sYXZcxMJ9JpjnGOBNo0Q
9LAuN2CNVeGEB0qzT5FmFTcZuzWyM0jSbNbESTNS6vYJ1W8IuBIEDYoPUTTH6Dd9
QP6DCwlW/m4xF5u8MV6K6eoDsNw5nkzCpvjkmujg+zokiBcqrfrS17pgYBY2pmlM
R5sryIQLZRow8w3MItWRwytAudPnR0qGnskMAZ/HD2GQTh4ooI3YCCU79wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODzGZOyHv7vka5E7zXOKavDE3acMB8GA1UdIwQY
MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt
OTQwYWU0NTRjYjg1LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1
LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqxbqBY0
FQfLgbicl63XBXQT/XjdtaspEbXhAR6+VqjGV3YIfosP3IFyFKBzZo5UzTUt9EQy
O267Ko+1CQYuBKGJgojQmQTIef6ti9moQsuU/9EN/M8sJFiVqHfSrMizUfC3w2kj
H0F9Wj0ExrwGWZYJEW22SX2Sf8nxAr3Qb02kdoRifYbLZhaQC/R4d3Xvks5ltHE2
ej49Yw/ahyZHd78PumEa7c10nzyENHW16GsDsPeEwKWYCN0LQKy2zSE2VFyMcaox
7+rHtc66eM6C+FCCi5Me/3bL06RepbxJT6zaWTRNSITGEw+0Oqu5e4pvhrBQu2qC
DZ/q8SFMXkGLtA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:06 2025 by rpki-client